Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 553
Alerts This Week
Warning Icon 1 553

SUSE Linux Enterprise 15 SP5 Kernel Important Security Update 2026-2989-1

suse
Calendar Grey July 14, 2026
Scroller Suse
Critical update addressing multiple vulnerabilities for SUSE Linux Kernel, enhancing security and system integrity with key fixes.
SUSE released a security update for the Linux Kernel addressing 11 vulnerabilities, improving security across multiple SUSE Linux Enterprise products, with specific patch instructi...

Summary

## This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues The following security issues were fixed: * CVE-2026-31758: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264094). * CVE-2026-43037: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (bsc#1265197). * CVE-2026-43366: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265117). * CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). * CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). * CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). * CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).

References

* bsc#1264094

* bsc#1265117

* bsc#1265197

* bsc#1266015

* bsc#1266265

* bsc#1267206

* bsc#1267698

* bsc#1267723

* bsc#1267893

* bsc#1268662

* bsc#1269023

Cross-

* CVE-2026-31758

* CVE-2026-43037

* CVE-2026-43366

* CVE-2026-43501

* CVE-2026-45970

* CVE-2026-46120

* CVE-2026-46173

* CVE-2026-46227

* CVE-2026-46243

* CVE-2026-52909

* CVE-2026-52943

CVSS scores:

* CVE-2026-31758 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-31758 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-31758 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-43037 ( SUSE ): 7.7

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-43037 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2989-1
Release Date: 2026-07-14T15:46:16Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.